Homeland 
Security 

Daily Open Source Infrastructure Report 

22 May 2013 

Top Stories 

• North Carolina authorities apprehended 5 individuals in connection with the theft of 
hundreds of thousands of dollars’ worth of copper throughout the State. - Laurinburg 
Exchange (See item 5) 

• Moore Medical Center in Moore, Oklahoma, suffered extensive damage after a tornado 
May 20. - Associated Press (See item 22) 

• Over 100 people were injured and 24 were confirmed dead as a tornado ripped through 
Moore, Oklahoma, May 20, leveling Plaza Towers Elementary School and several homes 
and businesses. - MSN News; Associated Press; Reuters (See item 23) 

• Researchers reported that a Chinese military cyberespionage unit previously identified in 
attacks against U.S. government and industry targets resumed operations. - New York 
Times (See item 31) 
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Energy Sector 



1. May 21, KTLA 5 Los Angeles- (California) Edison admits errors in Malibu Fire; 
settlements top $60 Million. Southern California Edison agreed to pay a $37 million 
dollar settlement that holds the utility responsible for overloaded utility poles which 
caused the 2007 Malibu Canyon fire, bringing settlements related to the fire to a total of 
$63.5 million. 

Source: http://ktla.com/2013/05/20/edison-admits-errors-in-malibu-fire-settlements- 
top-60-million/#axzz2TvluZkrY 

2. May 21, Nevada Daily Mail - (Nevada) Storms wreak havoc around Vernon 
County. Kansas City Power & Light Co. determined 77,000 customers were affected 
by storms in their service area after severe weather moved through Nevada May 20. 
Power, phone, and cable TV lines were all affected as crews worked to restore power. 
Source: http ://w w w . nevadadail ymail . com/story/ 1970938 .html 

3. May 21, Associated Press - (Indiana) Storm causes scattered Indiana power 
outages. Over 28,000 lost power in Indiana due to a line of thunderstorms that moved 
across the State damaging businesses and homes. 

Source: http://tribstar.com/latest/x730883991/Storm-causes-scattered-Indiana-power- 
outages 

4. May 20, San Antonio Express-News - (Texas) Two men injured after oil-filled 
tanker explodes in Von Ormy. A tanker filled with crude oil exploded at South Texas 
Industrial in Von Ormy, injuring two men May 20 while they were attempting to repair 
the tractor-trailer truck. 

Source: http://www.mvsanantonio.com/news/local news/article/Two-men-injured- 
after-oil-filled-tanker-explodes-4531043.php 

5. May 19, Laurinburg Exchange - (North Carolina) Deputies: Copper theft ring 
busted. North Carolina authorities apprehended 5 individuals in connection with the 
theft of hundreds of thousands of dollars’ worth of copper throughout the State. The 
group mostly targeted power companies and were active several times per week. 

Source: http://www.laurinburgexchange.com/view/full story/226 14230/article - 
Deputies— Copper-theft-ring-busted?instance=popular 

For another story, see item 23 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 



6. May 20, Kalamazoo Gazette - (Michigan) Palisades Nuclear Power Plant to replace 
bottom of leaking tank, remains shut down. The operators of the Palisades Nuclear 
Power Plant in South Haven formulated a repair plan that calls for replacing the bottom 
of a safety injection refueling water tank that was found to be leaking slightly, shutting 
down the plant May 5. 

Source: 

http://www.mlive.com/news/kalamazoo/index.ssf/2013/05/palisades to replace botto 
m of.html 

[ Return to top ] 

Critical Manufacturing Sector 

See item 31 
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Defense Industrial Base Sector 



See item 31 
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Financial Services Sector 

7. May 21, Los Angeles Times - (National) Guilty plea in KPMG insider-trading case. 
A California jeweler pleaded guilty to involvement in an insider trading scheme that 
used tips from an auditor at accounting firm KPMG to receive $1.27 million in illicit 
gains. 

Source: http://www.latimes.com/business/la-fi-shaw-hearing- 
20130521,0,3315815.story 

8. May 20, ABC News - (California) Three men arrested and charged in California 
fake bomb bank heist. Three men were arrested and charged with a $565,500 Los 
Angeles bank robbery that involved a bank managed being strapped with a fake bomb 
and told to retrieve cash from the bank’s vault. 

Source: http://abcnews.go.com/US/men-arrested-charged-california-fake-bomb-bank- 
heist/story?id= 19218100 

9. May 20, Help Net Security - (International) Jailed hacker designs device to thwart 
ATM card skimming. A Romanian hacker imprisoned for creating ATM skimming 
devices has invented a device that aims to prevent skimming by inserting the card 
lengthwise and then turning the card inside the machine. 

Source: http://www.net-securitv.org/secworld.php?id=14931 
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Transportation Systems Sector 

10. May 21, WIS 10 Columbia - (South Carolina) Evacuation order lifted after truck 
carrying ammonium nitrate catches fire. Authorities lifted an evacuated order after a 
truck carrying ammonium nitrate caught on fire. South Carolina Highway 39 and Rose 
Bud Lane in the Chappells area of Newberry County remained closed for an 
undetermined amount of time as a cleanup effort was underway to remove the spilled 
ammonium nitrate. 

Source: http://www.wmbfnews.com/storv/22304034/truck-carrying-ammonium-nitrate- 
on-fire-residents-asked-to-evacuate 

11. May 21, Toledo Blade - (Ohio) Rollover on 1-75 closes lanes for over 4 hours. An 
accident involving a single- vehicle rollover near the South Avenue exit in south Toledo 
closed the southbound lanes of Interstate 75 in downtown Toledo for more than 4 
hours. 

Source: http://www.toledoblade.com/Police-Fire/2013/05/21/Rollover-on-I-75-closes- 
lanes-for-over-4-hours.html 

12. May 20, Olympic Peninsula Daily News - (Washington) 1 killed, 5 hurt in 
construction zone on U.S. 101. A fatal chain reaction collision that left one dead and 
five others injured closed a section of U.S. Highway 101 between Port Angeles and 
Sequim in Clallam County for over 5 hours. 

Source: http://www.peninsuladailynews.com/article/20130520/news/305209980/l- 
killed-5-hurt-in-construction-zone-on-us-101 

13. May 20, KSDK 5 St. Louis; Associated Press - (Illinois) 5 dead in church van crash 
in Illinois. A fatal accident in which five people were killed and six others injured 
prompted authorities to close eastbound lanes of Interstate 70 in southern Illinois near 
Vandalia for several hours. 

Source: http://www.usatodav.com/storv/news/nation/2013/05/20/five-dead-illinois-van- 
crash/2343087/ 

14. May 20, New York Newsday - (Connecticut) Metro-North Crash: Normal service by 
Wednesday morning; tracks inspected 2 days before derailment. The Metro-North 
train service will resume regular service to New Haven May 22 following a collision 
May 17 in which 70 people were injured. 

Source: http://newvork.newsdav.com/news/nation/metro-north-crash-norrnal-service- 
bv-wednesdav-moming-tracks-inspected-2-days-before-derailment- 1,5299 183 

15. May 20, Los Angeles Times - (California) Big Rig carrying fruit crashes on 210 
Freeway, creates jam. A big rig carrying fruit overturned on 210 Freeway in the San 
Gabriel Valley and blocked three westbound lanes and two eastbound lanes for over 4 
hours. 

Source: http://www.latimes.com/local/lanow/la-me-ln-big-rig-crash- 
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20130520,0,2642136.story 



16. May 20, RARE 11 Minneapolis - (Minnesota) Fire damages hangar, planes at 
Fleming Field in St. Paul. A fire broke out in a hangar at Fleming Field at the South 
St. Paul Municipal Airport and damaged two to three planes. 

Source: http://www.karell.com/news/article/1026517/391/Fire-damages-hangar-at- 
South-St-Paul-airport?odyssey=tab%7Ctopnews%7Cbc%7Clarge 

[ Return to top ] 

Food and Agriculture Sector 

17. May 21, Food Safety News - (Georgia) BBQ Shack in Toccoa, GA likely source of E. 
coli outbreak. The number of reported cases of E. coli 0157:H7 in Stephens County 
rose from 7 to 1 1, and 10 of those reported eating at the BBQ Shack in Toccoa over the 
weekend of May 4-5. 

Source: http://www.foodsafetvnews.com/2013/05/bbq-shack-in-toccoa-ga-possible- 
source-of-e-coli-outbreak/#.UZtdibWkr44 

18. May 20, U.S. Food and Drug Administration - (National) Eco-Cuisine recalls product 
because of possible health risk. Eco-Cuisine of Boulder recalled 10 different baking 
mix products because they may have the potential to be contaminated with Salmonella. 
Source: http://www.fda.gov/Safetv/Recalls/ucm353311.htm 

19. May 20, Food Safety News - (North Carolina) NC Holiday Inn Salmonella outbreak 
hits 70. At least 70 people likely fell ill with Salmonella after dining at two restaurants 
within the Holiday Inn Bordeaux in Fayetteville, according to Cumberland County 
Health Officials. Investigators are tracing back foods shipped to the hotel in order to 
determine the cause of the outbreak. 

Source: http://www.foodsafetvnews.com/2013/05/nc-holiday-inn-salmonella-outbreak- 
hits-70/#.UZtdUrWkr44 

20. May 20, Food Safety News - (Minnesota) Unpasteurized Mexican Cheese sickens 25 
in Minneapolis. The number of people sickened with Salmonella poisoning after 
eating unpasteurized, homemade queso fresco has reached 25, up from the 12 cases 
originally reported the week of May 5, according to Minnesota health officials. 

Source: http://www.foodsafetvnews.com/2013/05/unpasteurized-mexican-cheese- 
sickens-25-in-minneapolis/#.UZtc-LWkr44 

[ Return to top ] 

Water and Wastewater Systems Sector 

21. May 20, WDAF 4 Kansas City- (Missouri) Water main break causes water troubles 
in Buckner. Buckner city residents were placed on a boil water advisory for at least 72 
hours after a water main break of undisclosed size caused low water pressure May 20. 
Source: http ://fox4kc .com/20 1 3/05/20/water-to wer-problem- suspected-for- water- 
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troubles-in-buckner/ 



For another story, see item 23 
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Healthcare and Public Health Sector 

22. May 20, Associated Press - (Oklahoma) Tornado damages small suburban 

Oklahoma City hospital, but all patients survive. Moore Medical Center in Moore, 
Oklahoma, suffered extensive damage after a tornado May 20. All 30 patients survived 
and 13 were transferred to other facilities. 

Source: 

http://www.greenfieldreporter.com/view/storv/a9fafleaef7b4ad6a5cd5050bfe22a34/US 
—Severe -Weather-Medical-Center 
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Government Facilities Sector 

23. May 21, MSN News; Associated Press; Reuters - (Oklahoma) Tornado hits 
Oklahoma; death toll revised down to 24. Over 100 people were injured and 24 were 
confirmed dead as a tornado ripped through Moore, Oklahoma, May 20 leveling Plaza 
Towers Elementary School and several homes and businesses. Crews were still 
searching through the rubble for victims and clearing debris, as well as dealing with 
downed power lines, open gas lines, and a lack of running water. 

Source: http://news.msn.com/us/tomado-hits-oklahoma-death-toll-revised-down-to-24- 

I 

24. May 21, Foster ’s Daily Democrat - (New Hampshire) Internet outage affects DMV 
offices in N.H. Several of New Hampshire’s Department of Motor Vehicle offices 
suffered computer outages May 20 after network problems hit FairPoint 
Communications customers. Crews were working to restore service after intermittent 
connection problems occurred throughout the day. 

Source: 

http://www.fosters.com/apps/pbcs.dll/article?AID=/20130521/GJNEWS 01/13052982 
6/-1/FOSNEWS 

25. May 20, KJZZ 91.5 FM Phoenix - (Arizona) Fire fighters battle human-caused fire 
in Coronado National Forest. Firefighters reached about 5 percent containment in a 
wildfire that burned through 800 acres east of the Nogales airport. 

Source: http://www.kizz.org/content/1305/fire-fighters-battle-human-caused-fire- 
coronado-national-forest 

26. May 20, Associated Press - (California) Report: NPS hantavirus response followed 
policy. The Interior Department’s Office of Inspector General released a report that 
found Yosemite National Park officials responded appropriately and within policy to a 
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summer 2012 hantavirus outbreak that affected at least 8 out of 9 tourists staying in the 
park’s signature cabins. The office made a list of recommendations after they 
discovered the current changes were not in place to prevent future outbreaks. 

Source: http://www.twincities.com/national/ci 232834 10/report-nps-hantavirus- 
response-followed-policy 

27. May 20, KUSA 9 Denver - (Colorado) Adams County middle school evacuated after 
threat. Students and staff from Shaw Heights Middle School in Westminster were 
evacuated for 3 hours May 20 after an unfounded threat was left on the school’s 
voicemail. 

Source: http://www.9news.com/news/article/337150/188/Adams-County-middle- 
school-evacuated-after-threat 



For additional stories, see items 1 and 31 
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Emergency Services Sector 

28. May 20, KVEW 42 Kennewick - (Washington) 911 outage in Connell. Roughly 1,500 
CenturyLink customers in Connell and Washtucna experienced 9-1-1, voice, and 
Internet service outages. Crews are investigating the cause and are working to restore 
services. 

Source: http://www.kvewtv.com/article/2013/may/20/91 1-outage-connell/ 
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Information Technology Sector 

29. May 21, The Register - (International) Syrian hacktivists hijack Telegraphy’s 
Facebook, Twitter accounts. Several Twitter accounts and the Facebook page of U.K. 
newspaper The Telegraph were briefly taken over by the Syrian Electronic Army 
hacktivist group and used to post pro-Syrian government messages. 

Source: http://www.theregister.co.uk/2013/05/21/sea hijacks telegraph twitter feeds/ 

30. May 20, Threatpost - (International) Remote code injection vulnerabilities 
discovered in iOS apps. Researchers from Vulnerability Laboratory discovered 
vulnerabilities in the File Lite and File Lite Pro apps available in Apple’s App Store. 
The vulnerabilities allow code injection and unauthorized file uploads. 

Source: http://threatpost.com/remote-code-iniection-vulnerabilities-discovered-in-ios- 
apps/ 

31. May 19, New York Times - (International) Hackers from China resume attacks on 
U.S. targets. Researchers at Mandiant and Crowdstrike reported that a Chinese military 
cyberespionage unit previously identified in attacks against U.S. government and 
industry targets resumed operations after a pause following reports of their prior 
operations. 
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Source: http://www.nvtimes.com/2013/05/20/world/asia/chinese-hackers-resume- 
attacks-on-us-targets.html 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 

32. May 20, High Plains Public Radio - (Oklahoma; Kansas) 91.3 KGUY Guymon: Off 
the air; 90.5 KZNA Hill City: problems. Severe storms in parts of Oklahoma and 
Kansas led to problems at radio station transmitter sites causing an outage for 91.3 FM 
KGUY Guymon and intermittent issues for 90.5 FM K Z NA Hill City. 

Source: http://www.hppr.org/post/913-kguv-guvmon-air-905-kzna-hill-citv-problems 

33. May 20, Oregonian - (Oregon) North plains phone outage expected to be fixed in 
coming hours. A fiber-optic cable was cut May 20 affecting North Plains CenturyLink 
phone service customers for several hours, but was expected to be repaired late that 
day. 

Source: http://www.oregonlive.com/north-of- 
26/index.ssf/20 13/05/north plains phone outage expe.html 

For additional stories, see items 1 and 28 
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Commercial Facilities Sector 

34. May 21, KDVR 31 Denver - (Colorado) 3-alarm fire rips through Fort Collins 
apartment complex. A three-alarm fire at an apartment complex in Fort Collins caused 
a complete evacuation of the complex as 40 firefighters worked to put out flames and 
determine its cause May 21. 

Source: http://kdvr.corn/2013/05/21/3-alarm-fire-rips-through-fort-collins-apartment- 
complex/ 

35. May 20, Boston Herald- (Massachusetts) 3 Kendall Square buildings evacuated 
after backhoe hits gas main. A construction mishap which severed a gas line forced 
the evacuation of three buildings, closed off local roads, and temporarily disrupted train 
services in Cambridge. 

Source: 

http://bostonherald.com/news opinion/local coverage/2013/05/3 kendall square build 
ings evacuated after backhoe hits gas main 
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For additional stories, see items 19 and 23 
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Dams Sector 



Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 



- 10 - 




